$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa File: e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa (raw, json) Hash identifier: si8M0Es4yIrGXCsa2rptZqon0YF4Wrxni7yyBr7zCkE= Subject key identifier: DE:CB:34:71:40:74:1E:C1:29:8C:D1:BA:A9:0C:A9:84:CE:EE:01:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E385CA8C2825909036CFA8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 396544 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:ca:8c:28:25:90:90:36:cf:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=1a8a397c-4922-4fd8-94bd-92b1cb6a92e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:0b:a3:86:6d:c9:69:ee:b0:57:7c:e7:cd: b7:bc:37:da:e6:39:24:1a:5a:e6:23:53:cc:77:0c: ae:ab:69:e7:48:a8:db:bc:b0:0e:81:c4:31:da:d3: e8:3f:2b:35:7d:93:b9:dd:f8:55:10:f4:d4:4d:39: 61:43:bb:08:0b:30:b1:69:b3:56:cc:dc:0c:07:a1: 2f:ef:80:bc:d9:ba:7f:a6:95:cd:ee:d5:7c:f0:db: 48:8e:9a:3f:87:ee:f6:8a:f7:5a:94:1d:f8:4f:8d: e0:d3:c6:46:92:5f:92:27:1a:de:38:21:59:d3:a3: 13:ac:00:21:3d:eb:86:23:c0:ca:f6:d8:66:6a:61: e7:f3:a1:69:18:9c:20:a0:fe:82:7a:f6:f8:32:54: e5:90:4e:ab:79:30:23:14:a5:12:88:66:05:5b:72: fb:08:01:58:39:c6:08:dc:18:c4:8b:ec:56:ca:ce: 9d:02:3a:02:43:f0:7e:82:b6:a8:a5:ee:92:6d:07: d1:8b:1f:f9:44:bf:26:1c:79:fe:fa:59:b5:69:3a: f0:1b:6a:91:fe:02:64:bb:48:60:12:c1:40:23:2b: 04:10:c6:06:3a:a6:79:4c:26:1d:f1:45:51:42:cc: 35:0a:8b:a4:26:40:0b:7a:ae:a1:5f:74:2e:45:51: 44:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:34:71:40:74:1E:C1:29:8C:D1:BA:A9:0C:A9:84:CE:EE:01:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:84:ef:0a:e1:da:ff:16:d3:fd:f1:93:ed:f8:d5:20:63:04: 62:28:9c:cc:ad:3f:da:d7:ed:7c:58:91:20:0a:17:93:f9:18: d9:b0:1b:3d:57:87:53:2e:a7:99:37:f6:96:85:42:82:47:74: 3d:1d:af:fd:a9:ea:3a:a7:3e:0d:27:3c:43:9f:86:85:a5:f9: 4f:8f:56:7f:e9:27:80:a1:28:36:a8:f5:ec:4a:dc:90:fb:53: 2e:85:f4:27:14:48:9a:1c:81:16:2b:07:3d:0d:9b:7e:f1:8f: f0:28:7a:52:f8:e9:b3:ce:19:9b:a3:1b:29:37:89:b3:19:9f: 25:ce:0e:4f:4a:9b:7a:29:44:bf:3b:86:10:32:f9:8a:30:bb: 89:ac:9d:9b:c7:e0:bd:8a:58:4e:22:6b:23:00:4a:40:91:b9: 0e:2c:1b:a8:6e:f2:b8:8b:bf:21:01:ea:54:b5:f1:66:15:0e: 5f:e4:e7:80:8b:09:e2:9a:f2:de:3a:b1:b4:3e:e0:91:ea:09: 02:4b:cb:49:27:0a:f1:3a:02:46:86:e3:a7:2d:ef:57:d5:71: 13:f3:de:f5:01:87:5c:53:c7:b7:f1:fa:4a:04:90:c7:f7:d7: a8:cb:87:0d:06:c5:08:36:58:25:84:66:a0:ab:a0:05:2c:30: 5b:a6:8b:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44XKjCglkJA2z6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk MWE4YTM5N2MtNDkyMi00ZmQ4LTk0YmQtOTJiMWNiNmE5MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNQLo4ZtyWnusFd85823vDfa5jkkGlrmI1PM dwyuq2nnSKjbvLAOgcQx2tPoPys1fZO53fhVEPTUTTlhQ7sICzCxabNWzNwMB6Ev 74C82bp/ppXN7tV88NtIjpo/h+72ivdalB34T43g08ZGkl+SJxreOCFZ06MTrAAh PeuGI8DK9thmamHn86FpGJwgoP6Cevb4MlTlkE6reTAjFKUSiGYFW3L7CAFYOcYI 3BjEi+xWys6dAjoCQ/B+graope6SbQfRix/5RL8mHHn++lm1aTrwG2qR/gJku0hg EsFAIysEEMYGOqZ5TCYd8UVRQsw1CoukJkALeq6hX3QuRVFE8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN7LNHFAdB7BKYzRuqkMqYTO7gEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTQ3MjBhMWEtY2U4YS0z M2ZjLTk3NDEtNmFiYmRjNDA3N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA+E7wrh2v8W0/3xk+341SBjBGIonMytP9rX7XxYkSAKF5P5GNmw Gz1Xh1Mup5k39paFQoJHdD0dr/2p6jqnPg0nPEOfhoWl+U+PVn/pJ4ChKDao9exK 3JD7Uy6F9CcUSJocgRYrBz0Nm37xj/AoelL46bPOGZujGyk3ibMZnyXODk9Km3op RL87hhAy+Yowu4msnZvH4L2KWE4iayMASkCRuQ4sG6hu8riLvyEB6lS18WYVDl/k 54CLCeKa8t46sbQ+4JHqCQJLy0knCvE6AkaG46ct71fVcRPz3vUBh1xTx7fx+koE kMf316jLhw0GxQg2WCWEZqCroAUsMFumiyg= -----END CERTIFICATE-----Generated at Sun Apr 27 17:51:14 2025 by rpki-client